{"id":"CVE-2024-28023","aliases":["EUVD-2024-25197","GHSA-mp2w-fjq2-347v"],"status":"published","title":"A vulnerability exists in the message queueing mechanism that if \nexploited can lead to the...","description":"A vulnerability exists in the message queueing mechanism that if \nexploited can lead to the exposure of resources or functionality to \nunintended actors, possibly providing attackers with sensitive information or even execute arbitrary code.","severity":{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00167,"percentile":0.05994,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-259"],"published":"2024-06-11T13:55:56Z","modified":"2026-06-17T07:20:49Z","products":[{"vendor":"hitachi energy","product":"foxman-un"},{"vendor":"hitachi energy","product":"unem"}],"references":[{"url":"https://publisher.hitachienergy.com/preview?DocumentId=8DBD000201\u0026languageCode=en\u0026Preview=true","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-28023"},{"url":"https://github.com/advisories/GHSA-mp2w-fjq2-347v"}],"sources":{"cve":[{"id":"CVE-2024-28023","description":"A vulnerability exists in the message queueing mechanism that if \nexploited can lead to the exposure of resources or functionality to \nunintended actors, possibly providing attackers with sensitive information or even execute arbitrary code.","status":"published","published":"2024-06-11T13:55:56.127Z","modified":"2024-08-02T00:48:47.834Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-259"],"updated_at":"2026-11-02T14:34:18.597034Z"}],"euvd":[{"id":"EUVD-2024-25197","description":"A vulnerability exists in the message queueing mechanism that if \nexploited can lead to the exposure of resources or functionality to \nunintended actors, possibly providing attackers with sensitive information or even execute arbitrary code.","status":"published","published":"2024-06-11T13:55:56Z","modified":"2024-08-02T00:48:47Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-03T03:50:26.752963Z"}],"ghsa":[{"id":"GHSA-mp2w-fjq2-347v","title":"A vulnerability exists in the message queueing mechanism that if \nexploited can lead to the...","description":"A vulnerability exists in the message queueing mechanism that if \nexploited can lead to the exposure of resources or functionality to \nunintended actors, possibly providing attackers with sensitive infor\u0002mation or even execute arbitrary code.","status":"published","published":"2024-06-11T15:31:14Z","modified":"2024-06-11T15:31:14Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-259"],"updated_at":"2026-11-02T14:57:27.679011Z"}],"nvd":[{"id":"CVE-2024-28023","description":"A vulnerability exists in the message queueing mechanism that if \nexploited can lead to the exposure of resources or functionality to \nunintended actors, possibly providing attackers with sensitive information or even execute arbitrary code.","status":"published","published":"2024-06-11T14:15:10.803Z","modified":"2026-06-17T07:20:49.69Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-259"],"updated_at":"2026-11-02T14:10:04.804473Z"}]}}